This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/HYbbsf8eCMyzWR7NIXL13jWqnOA.roa File: HYbbsf8eCMyzWR7NIXL13jWqnOA.roa (raw, json) Hash identifier: 4w478Bzu4qBOXzsZWI8tSBfQuiqe4KuvXGGHx+9OwLQ= Subject key identifier: 1D:86:DB:B1:FF:1E:08:CC:B3:59:1E:CD:21:72:F5:DE:35:AA:9C:E0 Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Certificate serial: 019A8BA06B9B3438A8ADA26BBAA1AF53A660 Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/HYbbsf8eCMyzWR7NIXL13jWqnOA.roa Signing time: Sun 16 Nov 2025 07:45:37 +0000 ROA not before: Sun 16 Nov 2025 07:45:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205886 IP address blocks: 92.62.248.0/24 maxlen: 24 92.62.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:8b:a0:6b:9b:34:38:a8:ad:a2:6b:ba:a1:af:53:a6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Validity Not Before: Nov 16 07:45:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1d86dbb1ff1e08ccb3591ecd2172f5de35aa9ce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8d:ad:b3:b4:fd:b7:20:fb:3c:a7:ae:c5:5d: c9:2e:7d:be:90:38:e1:72:75:08:91:bc:50:7c:3c: cc:ca:79:c9:16:03:9a:64:a5:9e:52:f6:76:5c:7d: 3d:a4:10:56:80:77:21:c3:9d:70:2a:e8:19:2d:86: b1:c2:ea:0f:e2:83:87:d7:b6:67:06:30:7e:ba:c0: 32:9a:46:92:d4:b7:1d:62:ba:cb:a2:2f:17:cd:b0: 86:62:02:b1:b1:78:39:f9:5f:f9:9b:02:98:e0:47: 54:58:79:18:a4:1a:44:81:14:bc:71:6b:46:83:74: de:5e:59:9f:5c:2c:b5:6e:ce:25:9e:1d:57:c0:70: 5f:8c:c2:42:e4:9c:b0:29:7d:84:2e:f1:d4:37:cc: 6b:ab:9e:c6:2c:d2:8f:66:36:a6:e0:ba:14:45:54: 5b:8f:f0:d6:95:f5:2d:68:35:f2:dd:ce:5c:6c:24: c3:f1:77:71:fe:b9:dc:5f:40:f3:74:74:41:80:80: 83:7a:cb:d5:4c:bf:20:4e:77:7f:32:13:d8:ae:0f: ad:cb:30:ef:aa:0a:05:8b:ee:1c:bc:f4:70:20:a6: b8:82:12:27:8e:19:3d:6e:63:4c:e3:8b:f1:b5:e4: d9:ac:b1:8d:69:07:c6:c6:19:a3:45:1c:ce:00:04: 84:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:86:DB:B1:FF:1E:08:CC:B3:59:1E:CD:21:72:F5:DE:35:AA:9C:E0 X509v3 Authority Key Identifier: keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/HYbbsf8eCMyzWR7NIXL13jWqnOA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.62.248.0/23 Signature Algorithm: sha256WithRSAEncryption 2d:3a:54:5e:af:56:7c:3f:cb:1f:f0:98:0f:03:0a:b2:b6:0d: 4e:5e:78:e4:26:21:2a:68:4f:50:d7:66:4c:78:bd:50:4c:1d: 37:d2:19:27:f2:34:39:a5:6e:75:c7:d8:8d:cb:aa:d7:e6:66: ba:89:21:7b:40:3b:12:42:ac:f6:69:1c:ff:ff:58:30:02:48: b9:34:99:94:8e:23:fd:1e:92:c6:09:f6:28:73:3e:38:87:9c: ea:d0:54:16:e1:f8:9a:b9:71:e0:26:46:1f:99:94:65:83:3d: c4:32:52:fc:c5:fa:8e:38:cb:5a:7b:98:c3:83:37:9f:0f:4d: 2c:fd:c3:e3:40:d3:46:77:0b:f2:bc:81:61:e8:f3:fb:36:af: 5a:fa:38:98:45:e2:c5:55:b1:20:7e:57:47:0d:cd:4d:03:c1: 50:db:ee:99:2f:6a:8e:c4:3f:22:56:59:2e:44:5c:ed:a4:11: e4:53:44:58:78:90:75:da:10:1a:e5:67:7f:e9:4b:a9:d7:33: d0:77:e5:36:14:6f:a9:2c:b5:95:ca:d1:d9:df:08:4f:2d:70: 74:41:87:1c:e7:0a:5d:56:b0:f8:70:cd:48:e0:15:6b:76:0b: f0:5f:4d:e4:7c:7c:34:12:2d:0c:e7:e5:ac:3b:37:60:6a:78: 88:1d:28:8b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqLoGubNDioraJruqGvU6ZgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy ODRkMGYwHhcNMjUxMTE2MDc0NTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDg2ZGJiMWZmMWUwOGNjYjM1OTFlY2QyMTcyZjVkZTM1YWE5Y2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY2ts7T9tyD7PKeuxV3JLn2+kDjh cnUIkbxQfDzMynnJFgOaZKWeUvZ2XH09pBBWgHchw51wKugZLYaxwuoP4oOH17Zn BjB+usAymkaS1LcdYrrLoi8XzbCGYgKxsXg5+V/5mwKY4EdUWHkYpBpEgRS8cWtG g3TeXlmfXCy1bs4lnh1XwHBfjMJC5JywKX2ELvHUN8xrq57GLNKPZjam4LoURVRb j/DWlfUtaDXy3c5cbCTD8Xdx/rncX0DzdHRBgICDesvVTL8gTnd/MhPYrg+tyzDv qgoFi+4cvPRwIKa4ghInjhk9bmNM44vxteTZrLGNaQfGxhmjRRzOAASE3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB2G27H/HgjMs1kezSFy9d41qpzgMB8GA1UdIwQY MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt NGY1N2Q5Y2Y1Y2FhLzEvSFliYnNmOGVDTXl6V1I3TklYTDEzaldxbk9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXD74MA0G CSqGSIb3DQEBCwUAA4IBAQAtOlRer1Z8P8sf8JgPAwqytg1OXnjkJiEqaE9Q12ZM eL1QTB030hkn8jQ5pW51x9iNy6rX5ma6iSF7QDsSQqz2aRz//1gwAki5NJmUjiP9 HpLGCfYocz44h5zq0FQW4fiauXHgJkYfmZRlgz3EMlL8xfqOOMtae5jDgzefD00s /cPjQNNGdwvyvIFh6PP7Nq9a+jiYReLFVbEgfldHDc1NA8FQ2+6ZL2qOxD8iVlku RFztpBHkU0RYeJB12hAa5Wd/6Uup1zPQd+U2FG+pLLWVytHZ3whPLXB0QYcc5wpd VrD4cM1I4BVrdgvwX03kfHw0Ei0M5+WsOzdganiIHSiL -----END CERTIFICATE-----Generated at Fri Dec 5 21:06:21 2025 by rpki-client